Description
An unauthenticated Denial-of-Service (DoS) vulnerability exists in the ANSI escape code service accessed via the PAPI protocol. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected Access Point.
Metrics
CVSS 3.1 7.5/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Hewlett Packard Enterprise (HPE) | AOS-8 Instant and AOS-10 AP | >= 10.5.0.0, <= 10.5.1.0; >= 10.4.0.0, <= 10.4.1.0; >= 8.11.0.0, <= 8.11.2.1; >= 8.10.0.0, <= 8.10.0.10; >= 8.6.0.0, <= 8.6.0.23 |
| arubanetworks | arubaos | >= 10.5.0.0, <= 10.5.1.0 |
| arubanetworks | arubaos | >= 10.4.0.0, <= 10.4.1.0 |
| arubanetworks | instant | >= 8.10.0.0, <= 8.10.0.10 |
| arubanetworks | instant | >= 8.11.0.0, <= 8.11.2.1 |
| arubanetworks | instant | >= 8.6.0.0, <= 8.6.0.23 |
| arubanetworks | arubaos | >= 10.3.0.0, < 10.4.0.0 |
| arubanetworks | instant | >= 8.9.0.0, < 8.10.0.0 |
| arubanetworks | instant | >= 8.8.0.0, < 8.9.0.0 |
| arubanetworks | instant | >= 8.5.0.0, < 8.6.0.0 |
| arubanetworks | instant | >= 8.7.0.0, < 8.8.0.0 |
| arubanetworks | instant | >= 8.4.0.0, < 8.5.0.0 |
| arubanetworks | instant | >= 6.5.0.0, < 6.6.0.0 |
| arubanetworks | instant | >= 6.4.0.0, < 6.5.0.0 |
References
Timeline
- Published
- May 14, 2024
- Last modified
- Jun 17, 2026
- NVD status
- Modified